Data protection is particularly important to AGYA Gıda İthalat İhracat ve Ticaret Limited Şirketi (hereinafter: "we", "us", "AGYA"). We consider it our primary duty to maintain the confidentiality of the personal data you provide and to protect it from unauthorized access. We therefore take the utmost care and apply the latest security standards to ensure maximum protection of your personal data.

With the following privacy policy, we would like to inform you about how we process your personal data in accordance with the applicable privacy laws. The privacy policy applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our website https://www.agya.com.tr/ (hereinafter referred to as "website"), as well as within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer").

1.Definitions

To simplify matters, we would like to explain some important terms in this context:

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Privacy Laws means all applicable worldwide data protection and privacy laws that apply to the Processing of Personal Data, including, but not limited to, European data protection laws, the CCPA and other applicable federal and state privacy laws in the United States, and the privacy laws of Australia, Canada, Singapore, India and Japan, in each case as amended, repealed, consolidated or replaced.
European Data Protection Laws means the data protection laws applicable in Europe, including (i) Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) ("GDPR"); (ii) Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and (iii) applicable national implementations of (i) and (ii); or (iii) GDPR as it forms part of UK domestic law pursuant to section 3 of the European Union (Withdrawal) Act 2018 ("UK GDPR"); or (iv) Swiss Federal Law on Data Protection and its Regulation ("Swiss Data Protection Law"); and (v) Turkish Law on Protection of Personal Data with Law no. 6698; in each case as amended, replaced or superseded from time to time.
Data Privacy Framework means the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK Extension of the EU-US Data Privacy Framework, self-certification programs (as applicable) operated by the US Department of Commerce; as amended, replaced or superseded from time to time.

2.Controller

Controller within the meaning of the applicable privacy laws:

AGYA Gıda İthalat İhracat ve Ticaret Limited Şirketi

Atatürk Mah. Alemdağ Cad. No: 140-144 İç Kapı No: 19

Ümraniye / İstanbul

E-mail: info@agya.com.tr

3.Contact us

You can obtain further information on the processing of your data by AGYA and on exercising your rights by contacting us by e-mail:

E-Mail: privacy@agya.com.tr

4.Data for the provision of the website and the creation of log files

If you use this website for purely informational purposes without transmitting data to us in any other way (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, e.g:

Identity (identd)
User name (if page is password protected)
User agent (browser type and browser version)
Language and version of the browser software

The temporary storage of the data is necessary for the course of a website visit in order to be able to display our website to you. This processing is technically necessary to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is therefore our legitimate interest in ensuring the availability, security and stability of our website.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are stored directly for a maximum of 7 days and are only accessible to administrators. After that, they are only available indirectly via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.

To provide our online services, we use storage space, computing capacity and software that we rent or otherwise obtain from the server provider Wix.com Ltd, 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel (web host).

We have concluded a data processing agreement with the provider. This is a contract prescribed by privacy laws, which guarantees that the provider will only process your personal data in accordance with our instructions and in compliance with the applicable privacy laws. In cases where there is no adequacy decision, we have agreed other suitable guarantees with the data recipients in accordance with the provisions of the applicable privacy laws.

Further information on data protection by Wix.com Ltd. can be found here:

https://de.wix.com/about/privacy

5.Contact form

You have the option of contacting us via our website using the "Contact form". We process the following personal data from you when you contact us and respond to your inquiry:

Name
E-mail address
Date and time of the request
IP address
Communication content, if applicable

If you contact us as part of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the personal data you provide will be processed for the purpose of processing and responding to your contact request in accordance with contract fulfilment or pre-contractual measures; otherwise, to safeguard our legitimate interests in responding to customer/contact inquiries appropriately.

We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. In the case of contact inquiries, this is generally the case when it is clear from the circumstances that the specific matter in question has been conclusively dealt with.

6.Plugins and embedded functions and content

We use social plugins from various social media platform providers (providers) on our website. When you visit one of our websites that contains such a plugin, your browser establishes a direct connection with the servers of the provider in question. The content of the plugin is transmitted by the provider directly to your browser and integrated into the website.

By integrating the plugins, the provider receives the information that you have accessed the corresponding page of our website. Various usage data (such as the URL accessed and the user's IP number) is forwarded to the third-party provider, which may set cookies that identify the user . If you are logged in to the respective provider, the provider has the option of assigning this information to your account. This data can be used to tailor content or advertising to you. You can find information on this and the available setting options on the following websites:

The legal basis for processing the data is your consent. We integrate the plugin via the so-called "two-click solution". This means that no personal data flows to the plugin owner when you visit our website. Only when you give your consent via the integrated preview button does a data flow from our website to the respective provider start.

7.Integration of third-party tools

7.1.Cookie Banner

We use the consent management service Wix.com Ltd, 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel. This enables us to obtain and manage the consent of website users for data processing.

When you visit our website or a sub-website for the first time, you will be shown a "cookie banner". There you will be informed about the individual cookies that we use. You can find out the name of each individual cookie, the provider, the purpose of processing and the storage period.

Our cookie banner informs you about the specific cookies we use. In addition, we give you the opportunity to decide whether you want to consent to the setting of non-essential cookies. The following data are processed:

the IP address of the connection you are using (in anonymized form)
the description of the web browser and operating system used,
the language used by your browser and operating system,
the address of the website on which you give your consent,
the date and time of consent,
the country from which you are submitting your request,
a pseudonym used to distinguish between different users,
Your consent status with regard to the cookies and similar technologies used by us or with regard to the services used, which serves as proof of your consent

Further data processing is carried out on the basis of our legitimate interest. We have an overriding legitimate interest in using the cookie banner, which enables us to obtain the legally required consent for the use of non-essential cookies and to comply with our duty to provide information regarding cookies.

The cookie banner stores the preferences until you reset or change them. Otherwise, the key and the consent status are stored in the browser for 12 months by using cookies.

Personal data may also be transferred to the USA. Wix.com Inc. is certified under the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK Extension of the EU-US Data Privacy Framework, thus committed to complying with appropriate data protection standards.

You can find further information on objection and removal options vis-à-vis Wix.com Ltd. at:

https://de.wix.com/about/privacy

7.2.Google Analytics

Our website uses functions of the web analysis service Google Analytics from Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA; (Google)). In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). With the help of Google Analytics, we analyze your user behavior in order to make decisions regarding product and marketing optimization based on the results. Among other things, we process the following personal data through Google Analytics:

Time of the request
IP addresses
Online labeling
Device identifiers
Technical characteristics of users (e.g. browser type and version, device type, operating system)
Measurement of user behavior (e.g. views of individual pages / content, views of content from different areas, session duration / dwell time, bounce rate)
Use of individual functionalities of the website (e.g. search queries, downloads)
eCommerce activity (e.g. products purchased, sales)
Referral URL (the previously visited page)

The legal basis for the use of Google Analytics is your voluntary and revocable consent. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

Personal data will be anonymized by Google 14 months after your last activity, unless there is a legal obligation to retain it.

Personal data may also be transferred to the USA. Google is certified under the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK Extension of the EU-US Data Privacy Framework, thus committed to complying with appropriate data protection standards.

Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/?hl=de.

7.3.Google Tag Manager

We use Google Tag Manager to control the use of code snippets ("tags"), such as tracking code on our website. In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager enables us to quickly and easily exchange code on our website via a web interface without having to intervene in the source code.

Among other things, we process the following personal data through the Google Tag Manager:

IP address
Device data, such as operating system, browser version, screen resolution

The legal basis for the use of Google Tag Manager is your voluntary and revocable consent. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

Personal data is anonymized by Google after 14 months, unless there is a legal obligation to retain it.

Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/?hl=de.

8.Use of cookies

8.1.General information

We use cookies on our website. These are text files that your browser automatically creates and that are stored on your IT system when you visit our website. Through cookies, certain information flows to the location that sets the cookie. By using cookies, it is not possible to execute programs or transfer viruses to your end device.
If you do not wish to use cookies, you can disable them in the settings.

From a legal perspective, a distinction must be made between necessary and non-necessary cookies.

8.2.Necessary cookies

We use necessary cookies. These are cookies that are technically necessary to provide all the functions of our website. The legal basis for data processing is our legitimate interest. We have an overriding legitimate interest in being able to offer our website in a technically flawless manner. The legal basis for the use of cookies vis-à-vis our contractual partners who make use of services contractually owed by us via our website is the provision of our contractual services.

8.3.Non-essential cookies

We also use non-essential cookies (e.g. analysis and marketing cookies). These are cookies that are not technically necessary. We use them to understand your behaviour on our website and to improve our offer. The legal basis for data processing is your consent. The cookies are only set after you have given your consent via our "cookie banner".

8.4.Storage duration

A distinction is made between the following types of cookies with regard to the storage period:

Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their end device (e.g. browser or mobile application).
Permanent cookies: Permanent cookies remain stored even after the end device is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. If we do not provide users with explicit information on the type and storage duration of cookies (e.g. when obtaining consent), users should assume that cookies are permanent and that they can be stored for up to two years.

For more information, please refer to the information we provide in the cookie banner.

9.Transmission of personal data

As part of our processing of personal data, personal data may be transmitted to other recipients or disclosed to them. The recipients of this personal data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your personal data that serve to protect your personal data.

10.Deletion of personal data

The personal data processed by us will be deleted in accordance with the legal requirements as soon as the consent given for processing is revoked or other permissions cease to apply (e.g. if the purpose of processing this personal data no longer applies, or it is not required for the purpose). If the personal data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted to these purposes. This means that the personal data is blocked and not processed for other purposes. This applies, for example, to personal data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person.

Our data protection notices also contain further information on the retention and deletion of personal data, which apply primarily to the respective processing operations.

11.Your rights as a data subject

11.1.Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, including profiling based on those provisions. Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

11.2.Right to rectification

In accordance with the statutory provisions, you have the right to request the completion of personal data concerning you or the rectification of inaccurate personal data concerning you.

11.3.Right to erasure and restriction of processing

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds provided for by law applies and insofar as the processing or storage is not necessary.

11.4.Restriction of processing

You have the right to demand that we restrict processing if one of the legal requirements is met.

11.5.Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format in accordance with the legal requirements or to request its transmission to another controller.

11.6.Right to withdraw consent

You have the right to withdraw your consent at any time.

11.7.Complaint to the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of privacy law.

12.Amendment and updating of the privacy policy

We will adapt the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

If we further develop our website and our offers or if legal or official requirements change, it may be necessary to amend this privacy policy.